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Many emerging applications (e.g., teleconference^ real-time information services, pay per 
view, distributfed interactive simulation, and collaborative work) are based upon a group 
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We present Keyed.HIP (KHIP), a secure, hierarchical multicast routing protocol. We show 
that other shared-tree multicast routing protocols are subject to attacks against the 
multicast routing Infrastructure that can isolate receivers or domains or introduce loops 
into the structure of the multicast routing tree. KHIP changes the multicast routing model 
so that only trusted members are able to join the hiulticast tree. This protects the 
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The distrit?uti6n of keys in a computer network using single key or public key encryption is 
discussed. We consider the possibility that communication keys may be compromised, 
and show that key; distribution protocols with timestamps prevent replays of compromised 
l<eys. The timestamps have the additional benefit of replacing a two-step handshake. 
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We present some practical security protocols that use private-key encryption in the 
public-key style. Our system combines a new notion of private-key certificates, a simple 
key-translation protocol, and key-distribution. These certificates can be administered and 
used much as public-key certificates are, so that users can communicate securely while 
sharing neither ari encryption key nor a network connection. 
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Untraceable electronic cash means prepaid digital payment systems, usually with offline 
payments, that protect user privacy. Such systems have recently been given considerable 
attention by.bbth theory and development projects. However, in most current schemes, 
loss of a user device containing electronic cash implies a loss of money, Just as with real 
cash. In comparisq^i with credit schemes, this is considered a serious shortcoming. This 
article shows 'Wow untraceable electronic cash can be m ... 
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In [BAN89] Burrc^^, AbadI, and Needham presented a logic (BAN) for analyzing 
cryptographic protocols in terms of belief. This logic is quite useful in uncovering flaws in 
protocols; howeVenji'it also has produced confusion and controversy. Much of the 
confusion was clearisd up when Abadi and Tuttle provided a semantics for a version of 
that logic (AT) in [AT91].In this paper we present a protocol to show that both BAN and 
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.Encryption hlirdware, designed for use in high-speed communications networks, can 
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